booking-notify

Warn

Audited by Socket on Apr 4, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The overall purpose is coherent for booking notifications, and Telegram/Pushover credentials are mostly proportionate. However, the skill’s real execution path depends on an external local calcom-commander codebase and an optional custom Cloud Run relay, creating moderate supply-chain and data-flow risk that is not fully explained within this skill.

Confidence: 86%Severity: 61%
Audit Metadata
Analyzed At
Apr 4, 2026, 09:55 AM
Package URL
pkg:socket/skills-sh/terrylica%2Fcc-skills%2Fbooking-notify%2F@60ab343122586de5b2931dfebf6393731a72d9ef